説明
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, spoof user interface, cause denial of service.
Below is a complete list of vulnerabilities:
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Information disclosure vulnerability in Clipboard Protection in Private Browsing Mode can be exploited to obtain sensitive information.
- Security vulnerability can be exploited to bypass security restrictions.
- Security vulnerability in Enhanced Tracking Protection’s Strict mode can be exploited to bypass security restrictions.
- Security UI vulnerability in URL Bar can be exploited to spoof user interface.
- Denial of service vulnerability can be exploited remotely to cause denial of service.
- Double-free vulnerability can be exploited remotely to cause denial of service.
- A null pointer dereference vulnerability in pk12util can be exploited remotely to cause denial of service.
- Security UI vulnerability can be exploited to spoof user interface.
- A remote code execution vulnerability in Executable File Confirmation Dialog can be exploited remotely to execute arbitrary code.
- Security UI vulnerability in Address Bar State can be exploited to spoof user interface.
- Out of bounds memory write vulnerability in Apple GPU drivers can be exploited to cause denial of service.
- A null pointer dereference vulnerability in NSC_DeriveKey can be exploited remotely to cause denial of service.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2024-11699 unknown
- CVE-2024-11696 unknown
- CVE-2024-11694 unknown
- CVE-2024-11695 unknown
- CVE-2024-11693 unknown
- CVE-2024-11692 unknown
- CVE-2024-11697 unknown
- CVE-2024-11698 unknown
- CVE-2024-11691 unknown
- CVE-2024-11702 unknown
- CVE-2024-11708 unknown
- CVE-2024-11704 unknown
- CVE-2024-11706 unknown
- CVE-2024-11701 unknown
- CVE-2024-11705 unknown
- CVE-2024-11700 unknown
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！